deploy/hostinger: default Traefik network to traefik-proxy (Hostinger)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

deploy/hostinger/.env.example

@@ -9,10 +9,10 @@
 PUBLIC_HOST=app.example.com
 
 # ---------------------------------------------------------------------------
-# Managed Traefik wiring  (confirm these three with Hostinger)
+# Managed Traefik wiring  (Hostinger Docker Manager defaults — leave as-is there)
 # ---------------------------------------------------------------------------
 # Name of the existing Docker network Traefik watches/attaches to.
-TRAEFIK_NETWORK=traefik
+TRAEFIK_NETWORK=traefik-proxy
 # Name of Traefik's HTTPS entrypoint (often "websecure" or "https").
 TRAEFIK_ENTRYPOINT=websecure
 # Name of Traefik's Let's Encrypt certificate resolver.

deploy/hostinger/README.md

@@ -49,7 +49,7 @@ On a box that does **not** already run Traefik:
 
 ```bash
 cp .env.example .env     # fill in PUBLIC_HOST, TURN_HOST, secrets, ACME_EMAIL
-docker network create traefik
+docker network create traefik-proxy
 docker compose -f docker-compose.traefik.yaml --env-file .env up -d   # stand-in Traefik
 docker compose --env-file .env up -d                                  # app stack
 ```

deploy/hostinger/docker-compose.traefik.yaml

@@ -12,7 +12,7 @@
 #   - a long idleTimeout so long-lived signaling WebSockets aren't cut
 #
 # Bring up BEFORE the app stack, on the same external network:
-#   docker network create traefik
+#   docker network create traefik-proxy
 #   docker compose -f docker-compose.traefik.yaml --env-file .env up -d
 #   docker compose --env-file .env up -d
 # =================================================================
@@ -55,4 +55,4 @@ volumes:
 networks:
   traefik:
     external: true
-    name: ${TRAEFIK_NETWORK:-traefik}
+    name: ${TRAEFIK_NETWORK:-traefik-proxy}

deploy/hostinger/docker-compose.yaml

@@ -87,7 +87,7 @@ services:
       retries: 5
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=${TRAEFIK_NETWORK:-traefik}"
+      - "traefik.docker.network=${TRAEFIK_NETWORK:-traefik-proxy}"
       # Audio file downloads. Highest priority so it wins over the UI catch-all.
       - "traefik.http.routers.dograh-audio.rule=Host(`${PUBLIC_HOST}`) && PathPrefix(`/voice-audio`)"
       - "traefik.http.routers.dograh-audio.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}"
@@ -209,7 +209,7 @@ services:
       start_period: 60s
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=${TRAEFIK_NETWORK:-traefik}"
+      - "traefik.docker.network=${TRAEFIK_NETWORK:-traefik-proxy}"
       # REST API + the signaling WebSocket (/api/v1/ws/signaling/...).
       # Traefik upgrades WebSockets automatically — no extra labels needed.
       # Higher priority than the UI so /api/v1 is matched first.
@@ -249,7 +249,7 @@ services:
       start_period: 30s
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=${TRAEFIK_NETWORK:-traefik}"
+      - "traefik.docker.network=${TRAEFIK_NETWORK:-traefik-proxy}"
       # Catch-all for everything that is not /api/v1 or /voice-audio.
       - "traefik.http.routers.dograh-ui.rule=Host(`${PUBLIC_HOST}`)"
       - "traefik.http.routers.dograh-ui.entrypoints=${TRAEFIK_ENTRYPOINT:-websecure}"
@@ -278,4 +278,4 @@ networks:
   # Traefik network. This file does not create it; it must already exist.
   traefik:
     external: true
-    name: ${TRAEFIK_NETWORK:-traefik}
+    name: ${TRAEFIK_NETWORK:-traefik-proxy}